In ncurses 6.0, there is an attempted 0xffffffffffffffff access in the append_acs function of tinfo/parse_entry.c. It could lead to a remote denial of service attack if the terminfo library code is used to process untrusted terminfo data.
CVSS Details
- CVSS 3.0 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ncurses | Oct 25, 2017 | Jul 8, 2017 |
| Amazon Linux Ami 2 | — | Upgrade ncurses-debuginfoUpgrade ncurses-compat-libsUpgrade ncurses-staticUpgrade ncurses-c++-libsUpgrade ncurses-develUpgrade ncursesUpgrade ncurses-baseUpgrade ncurses-termUpgrade ncurses-libs | Apr 27, 2020 | Jul 8, 2017 |
| Debian | — | Upgrade ncurses | Jul 30, 2024 | Jul 8, 2017 |
| Gentoo Linux | — | Upgrade sys-libs/ncurses. | Apr 18, 2018 | Jul 8, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade ncurses-termUpgrade ncurses-baseUpgrade ncursesUpgrade ncurses-libsUpgrade ncurses-devel | Dec 4, 2019 | Jul 8, 2017 |
| Oracle Solaris | — | Upgrade entire/ to version 11.4-11.4.0.0.1.15.0 on Solaris 11.4 | Oct 19, 2018 | Jul 8, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 24, 2017 |
| Suse | — | Upgrade libncurses5Upgrade sles12-docker-imageUpgrade libncurses5-x86Upgrade terminfoUpgrade libncurses6-32bitUpgrade terminfo-baseUpgrade sles12sp2-docker-imageUpgrade libncurses6Upgrade libncurses5-32bitUpgrade sles12sp1-docker-imageUpgrade ncurses-utilsUpgrade ncurses-develUpgrade ncurses-devel-32bitUpgrade tackUpgrade libncurses6-x86 | Aug 7, 2017 | Jul 8, 2017 |
| Ubuntu | — | Upgrade lib32ncurses5 (Ubuntu Pro)Upgrade libx32tinfo5 (Ubuntu Pro)Upgrade ncurses-bin (Ubuntu Pro)Upgrade libx32ncurses5 (Ubuntu Pro)Upgrade libtinfo5 (Ubuntu Pro)Upgrade lib32tinfo5 (Ubuntu Pro)Upgrade libx32ncursesw5 (Ubuntu Pro)Upgrade lib64ncurses5 (Ubuntu Pro)Upgrade ncurses-term (Ubuntu Pro)Upgrade libncursesw5 (Ubuntu Pro)Upgrade lib32ncursesw5 (Ubuntu Pro)Upgrade ncurses-base (Ubuntu Pro)Upgrade libncurses5 (Ubuntu Pro)Upgrade lib64tinfo5 (Ubuntu Pro) | May 27, 2022 | Jul 8, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 8, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub